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(54) Digital coupons for pay television 

(57) Digital coupons are selectively transmitted in a 
communication network to subscriber terminals for pro- 
motional purposes. Subscribers automatically receive 
coupon credits when they meet the preconditions of the 
digital coupons. Free or reduced price pay-per-view 
(PPV) programming in particular may be provided when 
a subscriber purchases a given number of PPV pro- 
grams at a regular price. The terminals maintain a run- 
ning balance of available coupon credits and inform the 
subscriber via a user interface of the available balance. 
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PAY-PER-VIEW ORDER 
PROCESSING 



Subscribers can be rewarded for viewing commercial 
messages by awarding coupons which can be immedi- 
ately redeemed for PPV programs. With an optional 
report back capability, terminal usage pattern data can 
be retrieved and analyzed by program service providers 
to determine the effectiveness of the promotions and to 
gather additional demographic and individual data. The 
integrity of the scheme is assured with encryption tech- 
niques. 



130 



USAGE PATTERN 
DATA ACCOUNTING 



-125 



-130 



CONTROLLER 



150 



ENCRYPT/ 
MUX/M00 



J DIGITAL COUPON 
| INFORMATION 



-135 



PROGRAMMING 
SERVICE DATA 



- 140 



CONTROL DATA 



-145 



160 



CHANNEL 




TERMINAL 1 



TERMINAL N 



180 - 



DISPLAY 



FIG.1 



Primed t)y Xerox (Uh J Easiness Seivices 



EP 0 891 084 A2 



Description 

BACKGROUND OF THE INVENTION 

5 The present invention relates to communications networks such as cable television, satellite television and compu- 

ter networks over which services are available for a fee. In particular, an apparatus and method are presented for allow- 
ing users of services such as pay television to obtain credits when viewing particular programs. The invention enables 
service providers to transmit credit information in the form of "digital coupons" to individual subscriber terminals to pro- 
mote particular programs and reward viewer loyalty. 

w Cable and satellite television networks where video services are available for a fee are well known. Also well known 
are computer network services such as CompuServe, Prodigy, America Online, Knight-RkJder Information Service, and 
others where databases, banking and shopping services can be accessed and e-mail and the like can be communi- 
cated, all for a fee. In the past, some networks have provided services on a free trial basis. For example, during promo- 
tional periods lasting for one or two days, for example, premium programming services such as movie or sports 

is channels could be viewed by subscribers who normally would have to pay an additional charge to receive such pro- 
gramming. In most cases, this is done by placing the entire service into some sort of promotional scrambling mode 
where the programs are either not scrambled, i.e. in-the-clear, or use fixed keys which are known to all subscriber ter- 
minals. For example, in a broadcast environment, service providers do not know which existing customer or potential 
new customer is attempting to access a particular service. Even if feedback could be obtained, for example, using a tel- 

20 ephone line or some upstream path, there would be too many transactions of customers tuning in and out of services 
for the service provider to usefully analyze. 

Consequently, the service must usually be placed in a scrambling mode which allows free accessed by everyone, 
including potential new customers and even existing customers, or at least a large defined group. Moreover, an 
extended period of free service time is usually needed to effectively promote services since the different programs 

25 which are made available during the free preview will appeal to different interest, demographic, and age groups of view- 
ers. For example, some viewers may prefer to see action movies while others prefer to see comedies. Thus, it is nec- 
essary to provide a wide variety of free programming over an extended period of time to effectively encourage viewers 
to subscribe to the premium programming services for an additional monthly charge. 

During the free preview period, renewal and new subscriptions rates may be reduced to further motivate the cus- 

30 tomer since the customer may otherwise wait until after the free preview period is over to order new services which may, 
in turn, stress the call handling capability of the service provider's subscription center. 

Additionally, various programs may be offered on an individual or a-la-carte pay-per-view (PPV) basis, where the 
subscriber pays a fee to view a single program. The customer may either call ahead to the subscription center to have 
a specific authorization or entitlement for a single program sent to the customer's terminal, or the customer can arrange 

35 to have a certain amount of monetary credit downloaded into the customer's terminal. With the selection of PPV pro- 
gram, the a pre-stored credit amount in the terminal is reduced. Such PPV may be offered at fixed times or staggered 
times with so-called Near Video On Demand (NVOD). Also programs may be delivered essentially instantaneously with 
Video On Demand (VOD). 

In VOD system systems, the program can be delivered on demand to a specific subscriber when that subscriber 
40 communicates a buy signal to a video server located at a cable television system headend. The buy signal may be com- 
municated, for example, through an available upstream channel in a cable television network, or via a telephone line. 

Various marketing techniques have been used to encourage subscribers to purchase pay-per-view programs. PPV 
usually are more profitable for the service provider than subscription services. These marketing techniques include pro- 
viding the subscriber with a credit on his monthly statement when the subscriber purchases a predetermined number 
45 of PPV programs, or spends a predetermined amount of money on PPV programs. Or, the subscriber may be mailed a 
paper coupon which the subscriber can later mail back to the network billing department to obtain a discount after the 
subscriber has met the preconditions for redeeming the coupon. For example, the paper coupon may entitle the sub- 
scriber to a credit of one-half the price of a PPV program when one PPV program is purchased at the regular price. 

While such marketing techniques can be effective, some subscribers may become accustomed to receiving paper 
so coupons and other discounts on their monthly statements and may then resist paying higher fees when such discounts 
are not offered. In other words, they will only buy if they get a coupon. It would be desirable to reward the subscribers 
after they have met some predetermined conditions. Additionally, it is not easy to selectively target groups of subscrib- 
ers or individual subscribers, without making the entire service free, or to monitor the effectiveness of such promotions. 
Moreover, the effectiveness of conventional promotions may be reduced because the realization of the discount by the 
55 subscriber is delayed, typically for a number of weeks due to delays in the billing cycle. Furthermore, paper coupons 
are difficult to organize and handle and are easily lost. 

Accordingly, it would be desirable to provide a method and apparatus for allowing selective targeting of promotions 
of programming services to particular subscribers or groups of subscribers without placing services in free mode, or 
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using paper coupons. The system should allow subscribers to receive an immediate credit when a predetermined view- 
ing pattern has been met. The system should reward subscriber loyalty and encourage subscribers to purchase addi- 
tional programming services such as PPV programs and/or additional levels of service, such as premium programming 
services. 

The system should also organize the credits in a way to allow the subscriber to take a quick inventory, and should 
inform the subscriber when a service is available through the promotion. The system should allow flexibility as to how 
the credits may be used, for example, in regard to the variety of shows, times, and dates the programming may be 
accessed. 

Furthermore, it would be desirable to provide a system for monitoring the success of such promotions, gain feed- 
back on subscriber viewing habits, and determine the viewership (e.g., audience size) of particular programs. The sys- 
tem should employ cryptographic techniques to thwart unauthorized persons (e.g., pirates) who attempt to tamper with 
the system for illicit gain. 

The present invention provides a system having the above and other advantages. 



SUMMARY OF THE INVENTION 



In accordance with the present invention, an apparatus and method are presented for allowing users of services 
such as pay television to obtain credits when viewing particular programs. The invention enables program service pro- 
viders to transmit credit information in the form of "digital coupons" to individual subscriber terminals to promote partic- 
ular programs and reward viewer loyalty. 

A communication system in accordance with the present invention includes a controller for transmitting program 
services to a plurality of subscriber terminals via a communication channel. The program service may include television 
programs which are broadcast or continuously transmitted on a predetermined schedule, pay-per-view programs which 
require specific user selection and either a local transacted or remotely transacted purchase, Near Video-On-Demand 
which is pay-per-view offered at staggered broadcast times, and Video-On-Demand services, which are transmitted 
only in response to a user request, or other electronic information such as computer software. 

The communication channel may include a cable plant and/or satellite link, for example. The program services can 
be selectively recovered by the subscriber terminals. For example, a subscriber may select a particular program to view 
by tuning in the corresponding channel using an on-screen interface, e.g. Electronic Program Guide (EPG), and a 
remote control unit, or by transmitting a buy order for either PPV or Video-On-Demand programming. 

The controller can deliver digital coupon information to the terminals along with program service data using any 
available technique, such as frequency or time multiplexing. The digital coupon information allows the terminals to 
obtain credits when recovering particular programs as defined by preconditions of the digital coupon information. For 
example, the subscriber may receive a credit for one free PPV program when the precondition of purchasing five PPV 
programs at regular prices has been met. The terminal automatically tracks the balance of coupon credits as coupons 
are awarded and redeemed. The credits are usable in obtaining program services at a reduced charge (e.g., at a dis- 
count or free). 

Each terminal includes a processor which monitors a usage pattern (e.g., viewing history) of the terminal to deter- 
mine if the preconditions of the digital coupon information have been satisfied. For example, the usage pattern may indi- 
cate which programs have been recovered by the terminal within the last month, or some other period, or the length of 
time that a particular program, or program service (e.g., channel) was viewed. The terminal may simply grant coupons 
based on the purchase of a PPV program, or based on the amount of time spent viewing an infomercial. The credits are 
thus awarded when there is a correlation between the usage pattern and the preconditions of the digital coupon infor- 
mation. 

A user interface such as a graphical user interface (e.g., on-screen display) may be provided to allow the subscriber 
to selectively redeem the credits. For example, the user may have a variety of options from which to choose, where a 
cash balance and/or a coupon balance are redeemed in full or in part. The user interface can also be used to obtain a 
confirmation of user involvement. For example, to verify that the subscriber is still viewing a program, he may be peri- 
odically required to provide some sort of control input as the program is displayed. 

When the program services include individual programs which can be individually recovered by the terminals, such 
as with a PPV scheme, the coupon credits are awarded when the usage pattern indicates that a terminal has recovered 
a particular number of such individual programs, or a particular amount of charges. This allows a coupon credit to be 
awarded whenever a PPV program has been accessed. One or more coupons may need to be redeemed in order to 
access a program. 

To allow program service providers and advertisers to obtain and analyze the terminal usage data, a usage pattern 
accounting center which is associated with a network controller may be provided. The usage pattern accounting center 
can receive usage pattern data from the terminals via a communication link, such as an upstream path in the channel 
over which the program services are transmitted, or a telephone network. This is especially useful for determining the 
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viewership of commercials or infomercials wherein the cost of running the ad in a program is oftentimes a function of 
the estimated viewing audience. 

Moreover, the network controller can control the delivery of the digital coupon information to the terminals based 
on the received usage pattern data. In this case, the network controller can deliver the digital coupons directly to the 

5 terminal in a similar fashion as with other entitlements such as subscription entitlements, PPV entitlements, and credit 
information. For example, subscribers who demonstrate a preference for sports programs can receive digital coupon 
information which provides discounts for future special sports events. 

The controller can thus deliver different digital coupon information to the different subscriber terminals based on the 
usage pattern data or other demographic or individual data which has been compiled by other means. The digital cou- 

w pon information can provide different preconditions for obtaining the same credits, or the same preconditions for obtain- 
ing different credits. For example, it is possible to reward favored subscribers such as those who purchase relatively 
more programming by providing the favored subscribers with more coupons than other, less favored, subscribers when 
the same viewing preconditions are met. 

Various cryptographic techniques may also be employed to prevent unauthorized access to the digital coupons. 

15 A corresponding subscriber terminal and method are also presented. 



BRIEF DESCRIPTION OF THE DRAWINGS 



FIGURE 1 is a block diagram of a communication system in accordance with the present invention. 
20 FIGURE 2 is a block diagram of a subscriber terminal in accordance with the present invention. 

FIGURE 3 is a block diagram illustrating a decryption hierarchy for use in accordance with the present invention. 

FIGURE 4 is an on-screen display for a user interface in accordance with the present invention. 

FIGURE 5 is another on-screen display for a user interface in accordance with the present invention. 

FIGURE 6 is yet another on-screen display for a user interface in accordance with the present invention. 
25 FIGURE 7 is a flowchart illustrating a method for providing digital coupons in accordance with the present invention. 



DETAILED DESCRIPTION OF THE INVENTION 



A method and apparatus are presented for allowing users of program services such as pay television to obtain 

30 credits when viewing particular programs. The invention enables program service providers to transmit credit informa- 
tion in the form of "digital coupons" to individual subscriber terminals to promote particular programs and reward viewer 
loyalty. The digital coupons may be generated locally in the terminals based on criteria sent by the service providers, or 
transmitted directly as an entitlement by the service provider. 

FIGURE 1 is a block diagram of a communication system in accordance with the present invention. The system 

35 includes a transmitting end, shown generally at 1 10, a channel 120, and a receiving end, shown generally at 130. The 
transmitting end 110 includes a central controller 130 which communicates with a. PPV order processing function 115, 
a terminal usage pattern data accounting function 125. an encryptor/multiplexer/modulator 150, a digital coupon infor- 
mation function 135, a program service data function 140, and a control data function 145. 

The receiving end 130 includes a number of terminals including terminal 1 (160) through terminal N (170), which 

40 receive the digital coupon information, program service data, and control data via a hub 124 and path 122. Each termi- 
nal has an associated display such as a television for displaying the program service data. For example, "terminal N" 

170 has an associated display 180. In the example shown, the terminals 160 170 are able to communicate with 

the PPV order processing function 1 15 and usage pattern data accounting function 1 25 via the channel 1 20. . 

For example, in a cable television network, such upstream communication may be provided on a channel (e.g., RF 

45 spectrum) which is separate from the channels over which the program service data is communicated. A frequency- 
division multiplexing scheme may be used to achieve this goal. Alternately, a time-division multiplexing scheme may be 

used, or the terminals 160 170 may communicate with the PPV order processing function 115 and usage pattern 

data accounting function 125 via a separate communication link such as a telephone network. Moreover, as discussed 
in greater detail below, the present invention can be implemented without the PPV order processing function 1 1 5 and/or 

so usage pattern data accounting function 1 25 

The channel 120 may comprise coaxial cable, optical fiber, and/or a wireless link such as a satellite or RF broad- 
cast link. The transmitting end 1 10 of the system may be a cable television system headend, a satellite uplink center, 
or an RF broadcast center, for example. 

The digital coupon information function 135 comprises a memory for storing digital coupon information in accord- 

55 ance with the present invention. The digital coupon information is communicated to the terminals 160 170 at the 

receiving end 130 of the system. Furthermore, when the terminals 160 170 are addressable, the digital coupon 

information may be targeted to individual terminals and/or to groups of terminals, for example, according to demo- 
graphic data. Alternatively, the digital coupon information may be transmitted via a path which is separate from that of 
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the program services. 

The digital coupon information provides credits which the terminals can use for a number of purposes. For exam- 
ple, the digital coupon information may provide a discount when the terminals order one or more PPV programs through 
the PPV order processing function 1 15. As an example, if a terminal orders five PPV programs within the current billing 

s cycle, the digital coupon credit may allow the terminal to order a sixth PPV program at no charge. Or, for terminals that 
order PPV programs infrequently, the digital coupon credit may allow the terminal to order a first PPV program at half- 
price. The digital coupon may be generated automatically based on program coupon criteria established by the service 
provider. This has the advantage of requiring no direct involvement by the service provider. This is also suitable for 
broadcast environments where the return path either does not exist, is slow, or not set-up for interactive transactions. 

w Alternatively, the digital coupon information may allow the terminals to access premium program services at a 
reduced charge, or at no charge, or allow the terminals to access other information, such as a software program, a com- 
puter game, a book in electronic form, a musical composition, an on-screen television program guide, movie or restau- 
rant reviews, or other promotional, informational or educational material. For example, the digital coupon information 
may allow a terminal to access a premium movie channel for two days with each PPV purchase, or to download one 

is computer video game, or to gain one hour of free connect time to a computer database. 

The term "program service" is thus used herein to encompass television, multimedia, and other audio and/or video 
signals as well as computer software or virtually any other information that can be accessed by, and/or communicated 
to, the terminals via the channel 1 20. The term "credit" is used herein to indicate that the terminals are provided with a 
benefit such as a reduced or waived charge when accessing and/or obtaining program services via the channel, or for 

20 obtaining merchandise via the channel which is delivered to the subscriber by other means (e.g., by mail). 

The terminals 160 170 do not realize the credit which is offered with the digital coupon information until the 

terminals satisfy certain preconditions. Each terminal includes .means for monitoring various factors which define the 
terminal's usage pattern data over a defined time period, including, for example, the number of PPV programs pur- 
chased, the amount of PPV charges incurred, whether, and for what duration, the terminal has been tuned to a partic- 

25 ular program or program service, whether the terminal has recently upgraded to one or more premium program 
services, and whether a promotional period is in effect. The promotional period may apply to individual terminals, such 
as those of new subscribers, to selected groups of terminals, or to all terminals. 

Accordingly, monitoring means in the terminals monitor the above factors to determine whether the usage pattern 
of the terminal corresponds with the preconditions of the digital coupon information. Optionally, in a "report-back" func- 

30 tion, the usage pattern data is periodically transmitted from the terminals to the usage pattern data accounting function 
125, for example, via the hub 124 and channel 120, or, alternatively, via a telephone network. For example, the usage 
data may be transmitted daily, weekly, or monthly. 

Such usage pattern data provides valuable information for program service providers and advertisers which can be 
used to better target individual subscribers and groups of subscribers with products and services with which they are 

35 likely to be interested. Moreover, the usage pattern data allows the interested parties (e.g., promoters and advertisers) 
to determine the effectiveness of various promotions. For example, when the digital coupon information provides.a one- 
half price PPV program to subscribers who infrequently order PPV, the success rate of the program can be determined 
from the usage pattern data at the function 125. j- 

As another example, when the digital coupon information provides two free days of access to one of a number of 

40 available premium program services, the selected premium program service can be monitored, and the subscriber can 
be subsequently offered a digital coupon which allows him to upgrade to the selected premium program service, e.g., 
at one-half off the normal charge for the first month. Various other marketing strategies may be used with the present 
invention to enhance revenue and customer goodwill. For example, a subscriber may be given coupon credit for a free 
pay-per view movie on his birthday. 

45 Moreover, the digital coupon balance may be adjusted according to lotteries or other contests or games. For exam- 
ple, subscribers may be able to enter a lottery for additional coupons if they spend a certain amount of money. Or, the 
subscriber may play interactive games of chance where the prizes and losses are determined in terms of coupons. 

However, even if the usage pattern data is not reported back to the function 125, the monitoring means in the ter- 
minal can determine whether the usage pattern data meets the preconditions of the digital coupon information. Prefer- 
so ably, this is done in a secure manner to prevent tampering by pirates, as discussed in further detail below. 

The controller 130 causes the digital coupon information from function 135 to be encrypted and multiplexed at the 
encryptor/mux/modulator 150 along with the program service data from function 140 and the control data from function 
145. The program service data may comprise video and/or audio data which is stored locally on storage media, and/or 
which is received from an external source such as a satellite downlink. Alternatively, the program service data may com- 

55 prise computer software or other electronic information. 

The control data includes cryptographic data which is used for generating working keys at the terminals for decod- 
ing the received data. Typically, one or more premium program services are communicated with basic program services 
over the channel 120. Both the basic and premium program services may be accessed with possession of the appro- 
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priate group key or keys. The group key or keys are delivered as part of an Entitlement Management Message (EMM). 
Possession of the group key or keys along with the appropriate entitlement control data allows the terminals to recover 
program keys from the program data sent by the service provider in Entitlement Control Messages (ECM). 

The program keys allow the derivation or decryption of the working keys which are used to encrypt the program- 

5 ming signal at the uplink or headend side, and to decrypt the program signals on the downlink or consumer decoder 
side. The term "recover" is used herein to indicate that a program service is received at a terminal and retrieved for use 
(e.g.. display) by the subscriber. 

The control data included in an Entitlement Control Message (ECM) is used to control access to a particular pro- 
gram service (i.e., channel). The ECM control data tells the terminal which entitlement needs to be held by the terminal 

w in order to be authorized to access and recover the particular program service. Typically, the ECM message which deliv- 
ers the control data information is also used to deliver the program key information. The ECM message therefore not 
only defines program parameters but also delivers a key or precursor key (e.g., pre-key). 

The ECM control data may further include data for providing the terminals with the cost for ordering a PPV program. 
This control data may further indicate the cost, in terms of the number, and type of coupons required to access the pro- 

75 gram, along with other details listing what number of coupons is required for a discount and so forth. 

FIGURE 2 is a block diagram of a subscriber terminal in accordance with the present invention. Like-numbered ele- 
ments correspond to the elements of FIGURE 1 . A demultiplexer/demodulator 205 of the terminal 1 70 receives the pro- 
gram service data, digital coupon information, and control data from the path 122 and hub 124. Demultiplexing and 
demodulating is performed using conventional techniques. The encrypted program service data is provided to a decryp- 

20 tion processor 212 and a switch 218 via lines 210 and 214, respectively, while the encrypted control data and digital 
coupon information are provided to a secure processor 220 via line 230. 

The encrypted program service is decrypted by the decryption processor 212 to provide a clear signal at output 216 
of the decryption processor. The secure processor 220 may receive the decrypted digital coupon information from the 
decryption processor 212. The decryption processor 212 can utilize a conventional decryption scheme, such as that 

25 disclosed in Gilhousen, et al., U.S. patent 4,613,901 entitled "Signal Encryption and Distribution System for Controlling 
Scrambling and Selective Remote Descrambling of Television Signals," or Bennett et al., U.S. patent 4,864,615 entitled 
"Reproduction of Secure Keys By Using Distributed Key Generation Data." both incorporated herein by reference. 

The decryption processor requires working keys (WK) to decrypt the signals input thereto via line 210. The working 
keys are generated by the secure processor 220 in response to the control signals received via line 230. Firmware for 

30 the secure processor is stored in read only memory (ROM) 224. The secure processor 220 is also provided with ran- 
dom access memory (RAM) 222. A secure portion of the RAM 222 holds unit specific keys and/or seeds for use in 
decryption of a monthly group key, as discussed in greater detail in connection with FIGURE 3. 

A user interface 226 enables a viewer to select program services for viewing on a television (TV) 180. If a user is 
authorized to receive the selected service by subscription, individual purchase (e.g., pay per view), or according to a 

35 digital coupon credit, the secure processor 220 will actuate the switch 218 to couple the decrypted output 216 from 
decryption processor 212 to the TV 180 via user interface 226. Otherwise, the user interface and TV will only receive 
the encrypted signal via line 214 and switch 218. As will be appreciated by those skilled in the art. switch 218 could 
alternatively be configured to provide a barker channel (e.g.. a fixed message) to the user, or no signal at all, in the event 
that the user is not authorized to access the selected service. 

40 The secure processor 220 monitors the programming which is selected by the user via the user interface 226 to 
determine whether the user has met the preconditions for obtaining the digital coupon credit. For example, if the digital 
coupon provides a credit for one free PPV program when five PPV programs are purchased at the regular price, the 
secure processor will record each occurrence of a purchase of a PPV program. The RAM 222 may be used to store the 
corresponding data. The usage pattern data thus includes data which is related to the digital coupon preconditions but 

45 can include other user selections as well. A communication interface 230 such as a data modem is provided to allow 
the terminal to transmit buy orders for VOD programming and certain types of programming which require a service pro- 
vider's authorization for acquisition to the PPV order processing function 1 15 of FIGURE 1. PPV purchases processed 
locally by the terminal and stored internally to the terminal may be forwarded to the PPV processing function for billing 
purposes. The interface 230 also allows the terminal 1 70 to transmit the usage pattern data to the usage pattern data 

so accounting function 125 of FIGURE 1 . 

The terminal receives control data in the form of an Entitlement Management Message (EMM) which provides an 
initial currency credit balance for the terminal 170. In this case, when a user orders PPV programs, for example, the 
overall currency credit balance is decreased by the cost of the programs. The EMM message originating from the serv- 
ice provider may or may not deliver an initial or additional coupon credit to the terminal. 

55 Typically, coupon credit is generated when the preconditions for obtaining the digital coupon credit are realized. The 
coupon credit balance can be immediately adjusted. As an illustration, assume the initial credit balance is $40, and 
each PPV program costs $5. Then, the credit balance will drop successively to $35. $30. $25, $20 and $15 after the 
first five programs are purchased. At this time, the usage pattern data meets the preconditions of the digital coupon 
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information, and the coupon credit balance gets incremented by one. 

Alternatively, the coupon credit balance is incremented by one with each PPV purchase. When the terminal tunes 
in to the sixth program, the terminal receives a Entitlement Control Message (ECM) for the program. The terminal uses 
the ECM to determine the different ways that the program may be accessed. The ECM will also describe the currency 

5 cost and the coupon cost, if the program is available by coupon. The terminal will automatically determine whether or 
not the terminal has a coupon or coupons to acquire the program. If so, the program is automatically offered to the 
viewer, or the viewer is prompted to purchase the program using currency or coupons. 

By choosing the coupon option, the next order for a PPV program is provided free, and the coupon credit field is 
decremented appropriately. Thus, the balance remains at $15. Alternatively, the terminal is charged for the sixth pro- 

10 gram, but the secure processor increments the credit balance by the cost so there is no net change in the credit bal- 
ance. The secure processor may provide a display on the user interface 226 that informs the viewer that the 
preconditions of the digital coupon information have been met. Of course, it is possible for coupon credits to accumulate 
when the corresponding preconditions are met but the credits are not realized, i.e., cashed in. The credits may be 
retained in the terminal for a predetermined period such as two or three months, or indefinitely. The secure processor 

75 may inform the subscriber if the credits are about to expire. 

As described in further detail below in connection with FIGURES 4-6, the viewer may query the user interface 226 
to determine the credit balance along with other related information. 

FIGURE 3 is a block diagram illustrating a decryption hierarchy for use in accordance with the present invention. 
An encrypted program pre-key is input via terminal 340 to a decryption function 344 which also receives a monthly 

20 group key via terminal 342. The program pre-key is unique to each encrypted program offering (e.g.. television pro- 
gram) that is available for decryption. The group key is changed on a periodic basis, e.g.. once each month. The decryp- 
tion function 344 decrypts the encrypted program pre-key to provide a program pre-key that is used as one input to a 
one-way function 348. The other input to one way function 348 comprises various program and coupon attributes, 
including access requirements, such as coupon and currency cost, for the corresponding program. The access require- 

25 ments must be met to obtain authorization to view the program. The program and coupon attributes are input via termi- 
nal 346, and the one way function processes the program pre-key and program attributes to provide a program key. 

The program key output from one way function 348 is used as one input to another one way function 352 that also 
receives, via terminal 350, an initialization vector (IV) representative of time. The processing of the initialization vector 
and program key by one way function 352 generates the working keys required by decryption processor 21 2 of FIGURE 

30 2 to decrypt the program service selected by an authorized user. A further description of the generation of the various 
keys, including working keys (provided in a "keystream H ), can be found in the aforementioned Bennett, et al. patent. 

Optionally, the digital coupon information and program services can be encrypted according to a common crypto- 
graphic key. This could allow an authenticated file, for example, which represents a coupon image, to be sent to the 
decoders. The coupon could subsequently be redeemed as an authenticated image by transmitting the coupon from 

35 the decoder to the program service provider or other accounting center. 

FIGURE 4 is an on-screen display for a user interface in accordance with the present invention. The display 400 
may be invoked as pad of a graphical user interface (GUI) which allows a user to select channels and control other fea- 
tures such as volume and the like. Such interfaces are well known in the art. The display 400 may be controlled by a 
hand-held remote control, a pointing device, voice command or any other available means. For example, a user may 

40 select a PPV program such as a movie from a graphical user interface which causes the display 400 to appear. 

The display 400 includes a field 410 which informs the user that he is not currently subscribed to the selected pro- 
gram. That is, the user must order the program. A field 420 informs the user that he has different options in ordering the 
program. Fields 430-460 present the options. A field 440 presents a first option wherein the movie may be purchased 
as an impulse pay-per-view (IPPV) program with the cost being deducted from an available cash credit balance. The 

45 user is thus informed of the cash cost of the movie and the available cash credit balance. The program can be pur- 
chased as long as there is a sufficient cash credit balance. 

A field 450 presents a second option, where the program may be purchased using digital coupons alone. The user 
is informed of the coupon cost of the movie and the available coupon credit balance. The program can be purchased 
as long as there is a sufficient coupon credit balance. The digital coupons are referred to here as TV" coupons. 

so A field 460 presents a third option, where the program may be purchased using a combination of cash and digital 
coupons. The user is informed of the cost of the movie using both coupons and cash, and the available cash credit bal- 
ance and coupon credit balance. While only one cash/coupon combination is provided in field 460, it will be understood 
that other combinations may also be provided. In fact, the coupons may be assigned a cash value for this purpose. 
In another option, not shown, a subscriber may order a PPV program for a discount if the subscriber is willing to 

55 have commercial messages appear which would not otherwise be present. For example, a commercial message using 
teletext may appear on the bottom portion of the screen when viewing a PPV movie. Or. with VOD, the PPV movie cho- 
sen may have periodic commercial message breaks when the discounted program is selected, whereas no commer- 
cials would be provided otherwise. 
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FIGURE 5 is another on-screen display for a user interface in accordance with the present invention. Here, the dis- 
play 500 provides information on the number of coupon credits which have been accumulated while viewing different 
channels. For example, the various program service providers may provide viewers with coupons based on the number 
of hours of that service provider which is viewed per week, and/or which programs were viewed. 

5 Fields 510 and 530 list the various program service providers, while fields 520 and 540 list the number of coupon 

credits which have been accumulated. For example, for the service provider Home Box Office (HBO), there is a balance 
of four coupons. In this manner, the program sen/ice providers may compete to encourage viewership. For example, 
when launching a new program, additional coupons may be provided. Furthermore, coupons may be accumulated 
based on the time of day or day of week that programs are viewed. Moreover, program service providers that are com- 

w monly owned may award coupons to encourage viewership of their programs. 

FIGURE 6 is yet another on-screen display for a user interface in accordance with the present invention. The dis- 
play 600 provides an example of the variety of items from which the subscriber may select using the digital coupons of 
the present invention. Moreover, each of the program service providers along with other interested parties may offer 
their own items. A field 610 indicates that the particular display 600 is that of the service provider Cable News Network 

15 (CNN). A field 620 indicates the current coupon credit balance, while a field 630 indicates the items that may be 
obtained, and field 640 indicates the number of coupons needed to obtain each item. 

Thus, the user may redeem the digital coupons for a wide variety of items, including additional programming that 
can be communicated to, or accessed by, the terminal as weii as non-programming items which can be delivered to the 
user's home, e.g., by mail. 

20 Some items may not require any digital coupons. For example, a field 650 describes product information which can 
be communicated to the subscriber's terminal or delivered to the subscriber's home at no cost. However, when the sub- 
scriber requests the product information, the usage pattern data is updated and may be subsequently provided to the 
usage pattern data accounting function 125 of FIGURE 1, where it may be used for marketing purposes. - - 

FIGURE 7 is a flowchart illustrating a method for providing digital coupons in accordance with the present invention. 

25 The flowchart describes an embodiment where an initial cash credit balance is provided to a terminal, for example, on 
a monthly basis. Then, when the user desires to view programming such as PPV programming that has an associated 
cost, the cost is deducted from the cash credit balance. Furthermore, when the user meets the preconditions of the dig- 
ital coupon information as determined by the usage pattern data, a coupon credit balance is accumulated. The coupon 
credit balance may be used to purchase additional program services in lieu of cash, or, optionally, to defray the cost of 

30 programs already purchased. In the latter case, the coupon credits may be assigned a cash value. 

At block 705, the controller at the transmitter delivers an initial cash credit balance to the terminals. The amount 
delivered to each terminal may be different and may be based, for example, on past purchasing habits. At block 710, 
the controller delivers the digital coupon information to the terminals. Again, different terminals may receive different 
coupon data according to demographic factors and the like. At block 720, the terminal usage pattern is monitored and 

35 recorded. In particular, events which meet the preconditions of the digital coupons are recorded, while other data indic- 
ative of user habits may also be recorded. 

The digital coupon preconditions may account for a variety of events, such as whether the subscriber has pur- 
chased a given number N of PPV programs in the last M days (block 722), in which case a digital coupon credit "1" is 
awarded at block 724. It will be appreciated that different types and amounts of coupons may be awarded according to 

40 the particular precondition which the viewer meets. For example, some coupon credits may be more valuable than oth- 
ers, or may be redeemed for different benefits. 

At block 726, if it is determined that the subscriber has purchased X$ of PPV programs in the last Y days, a digital 
coupon credit "2" is awarded at block 728. At block 730, if the subscriber has viewed an "infomerciaT for a number Z 
minutes, a digital coupon "3" is awarded at block 732. An "infomercial" is a commercial message that has the length and 

45 format of a regular program, e.g., such as one-half hour or more, and generally garners a relatively small audience. For 
marketing purposes, it is desirable to reward viewers for viewing infomercials even though there is no charge incurred 
for viewing the program. Optionally, coupon credit may be awarded only for the first viewing of the program, so addi- 
tional coupon credits are not awarded for repetitive viewing of the same program. 

At block 734, if the subscriber has upgraded from a basic programming tier to a premium programming tier, or to a 

so higher premium programming tier, a digital coupon "4" is awarded af block 736. At block 738. if a promotional period is 
in progress, a digital coupon "5" is awarded at block 740. Such a promotional period would generally apply to all sub- 
scribers. 

At block 750, the total amount of coupon credits is determined. At block 760. if the coupon credit balance is above 
zero, then at block 770, the user is prompted by the user interface (e.g., every time the television is turned on) to select 
55 among the various options which are available in redeeming the digital coupons. For example, the subscriber may order 
PPV programming for a discount or no charge, access premium programming for a predetermined period of time, or 
simply pass and take advantage of the available options at another time. The various options have been discussed 
above in greater detail in connection with FIGURES 4-6. In addition to the periodic prompts described above, a user will 



8 



EP0 891 084 A2 



also have the capability of accessing the coupon redemption menu at any time via the remote control. 

At block 780, the digital coupon balance is adjusted by the number of coupons redeemed at block 770, and the 
monitoring of the terminal usage pattern continues at block 720. 

Note that it is possible to verify that the user is actually viewing a particular program by requiring some sort of sub- 
s scriber involvement. For example, to verify that a subscriber has watched an infomercial for Z minutes, the terminal may 
require the subscriber to input a command to the user interface. The user interface may provide a message such as "Do 
you wish to continue", to which the subscriber must respond to meet the digital coupon preconditions. An internal timer 
within the terminal may be halted until a response is received. 

For subscribers who view infomercials and the like, to ensure that only one set of coupons are awarded per pro- 
w gram, the COUPON_RECORD_DURATION field as discussed below in Table 3 is provided to indicate a duration in 
which the program record of the infomercial is stored in the terminal. This precludes the same subscriber from getting 
repeated coupons for the same infomercial that is run again and again, while still enabling the same program ID for the 
infomercial to be used repeatedly. 

The data delivery syntax set forth below in Tables 1 -4 may be used in accordance with the present invention. Tables 
15 1-3. respectively, describe data fields which may be used when digital coupons are delivered to terminals using an 
EMM, an IPPV ECM purchase linkage, and a program re-key ECM. Table 4 describes data fields which may be used 
with all delivery methods. It should be appreciated that the syntax shown is for illustration only and that other data deliv- 
ery schemes may be substituted. 

20 

TABLE 1 



Syntax 


Size 


Description 


COUPON_PROVIDERJD 


3 bytes 


Identifies coupon sponsor 


NEW_COUPON_CREDIT 


3 bytes 


Absolute number of coupons for service provider in a month 


NEW_COUPON_DEBIT 


3 bytes 


Absolute debit for service provider in a month 


COUPON_CREDIT 


3 bytes 


Total accrued coupons 


COUPON_SEQ_NUMBER 


1 byte 


Epoch (time period) of coupon delivery 



TABLE 2 



Syntax 


Size 


Description 


COUPON_PROVIDERJD 
COUPON_CREDIT 


3 bytes 
1 byte 


Identifies coupon sponsor 
Coupon credit remaining 



45 






TABLE 3 




Syntax 


Size 


Description 




COUPONJD 


2 bytes 


COUPONJD + COUPON_PROVIDERJD = unique coupon ID) 


50 


COUPON JWOUT_DURATION 


2 bytes 


Time period subscriber must view program to obtain coupon credit. 


COUPON_RECORD_DURATION 


3 bytes 


Time period coupon is retained at terminal 




COUPON_PROVIDERJD 


3 bytes 


Identifies coupon sponsor 



55 
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TABLE 4 



Qwnfav 

oyiiiaA 


oize 


Lj 'cbUI ifJiiun 




_ uyico 


INtliTlUct OI awiOI UcU wUUpun UcUiib 


coupon papkahp in 




type ui coupon iui pannage pi uy iam 


IPP\/ PRPHIT 
it™ v oncui i 


_ uyies> 


v^asn creaii oaiance Tor pay-per-view 


papkac^p PRO\/inPR in 


_ uyies 


iu en lines service proviuer or package ot programs 


PKH 


i uyie 


oasn cnarge Tor package program 


pkh in 


i uyie 


luefiiiueo pduAdye 


PROGRAM_PAYOUT_DURATION 


1 byte 


Minimum time subscriber must view program to gain credit 


PROGRAMJNFORMATION 


2 bytes 


Video/audio data of program 


SH0W_C0UNT 


2 bytes 


Count of shows purchased 


VH_LIMIT 


2 bytes 


View History Limit before report back is mandatory 


VIDEO_PROVIDER_ID 


2 bytes 


Identifies service provider 



To thwart piracy, digital coupons may only be offered to subscribers with established impulse PPV accounts where 
there is a report-back capability. This can be effected, for example, by using a bit as a flag in either the group re-key 
EMM or Program rekey ECM. 

The report-back feature discussed above in connection with the usage pattern data accounting function 1 25 of FIG- 
URE 1 allows the program service providers and network controller to monitor the audience size for different programs. 
The use of digital coupons can therefore allow the service providers to detect viewership patterns over a wide cross- 
section of programs, and not just premium shows. In other words, shows which are not available through PPV might be 
made available through coupons. 

In the following program delivery scenarios, it is assumed that a real channel (i.e., program) must exist which can 
be purchased with coupons. This can be enforced by hashing the program information to generate a program key as 
explained further below. Therefore, a program cannot be viewed using digital coupons unless it is actually offered to 
coupon holders. 

However, pirates may attempt to tamper with the delivery of the coupons. The main objective of the pirate is to 
defeat the system by providing false messages (e.g., "spoofing") to obtain digital coupons without having to perform any 
of the coupon preconditions. In accordance with the present invention, different ways to securely delivery the 
COUPON_CREDIT field to terminals are discussed. 

There are three ways to deliver the digital coupons, i.e., using a group re-key EMM, an IPPV purchase linkage, or 
a program re-key ECM. The group re-key message technique can handle a distribution of coupons to a general popu- 
lation of terminals as well as providing a method that is linked to iPPV purchases. IPPV purchase linkage could be done 
independently from group re-key message delivery, however. The delivery of coupons via the group re-key message 
may be mutually exclusive from the program re-key technique since, with the program re-key technique, the network 
controller or PPV order processing center does not know how many coupons a subscrtoer might earn using the method 
where the coupons are generated internally by the terminal. Thus, management of group re-key based coupons cannot 
be handled as securely inside a terminal unless group re-key based coupons are tracked separately from program re- 
key based coupons. 

Direct delivery of coupons through a group re-key entitlement management message (EMM) is the most straight- 
forward way to control the delivery of coupons to subscribers. This approach is suitable for IPPV service providers who 
decide to reward particular subscribers based, for example, on previous purchasing volume. The service provider thus 
knows which particular subscribers are to receive the digital coupons and can therefore direct a unit specific EMM to 
each of the subscribers. 

Additionally, the group re-key EMM approach is suitable for providing subscribers with digital coupons along with a 
designator which allows text message commercials. These on-screen displays convey advertising and can be overlaid 
on top of the video and audio displayed. As discussed previously, these subscribers are willing to view such commer- 
cials to obtain digital coupon benefits such as discounts on other programs. Again, the service providers know exactly 
which subscribers agreed to have text message commercials delivered to them, and can therefore provide them with 
the corresponding digital coupons through an EMM. 
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Moreover, using the COUPON_CREDIT and VHJJMIT data fields, individuareervice providers can send digital 
coupons to individual subscribers. Each service provider is identified by the field VlDEO_PROVIDERJD. If a pirate 
were to synthesize a group key message with a false VIDEO_PROVIDER_ID and COUPON_CREDIT, thereby resulting 
in a bad group key. the pirate might be able to create false VIDEO_PROVIDERJD. COUPON_CREDIT pairs inside the 
terminal. 

One solution to the above problem is implemented using EMM authentication. In particular, if the group re-key EMM 
used by a transmitting satellite, for example, is hashed. The hash is then encrypted to create a signature. A pirate can- 
not produce a counterfeit group re-key EMM without knowledge of a terminal's unit keys, and the key hierarchy. In this 
case, the counterfeit message will be rejected without processing. Another way to authenticate a message is to use 
public key cryptography to sign or encrypt the entire message. This can also prevent the generation of counterfeit mes- 
sages. 

Furthermore, a pirate may use "replay" attacks using legitimately built messages. In this case, a legitimate mes- 
sage is saved and provided to a terminal months after the message was originally created and first used to make new 
COUPON_CREDIT inside the terminal. To protect against this, group sequence numbers may be incremented. 

Moreover, the pirate may attempt to replay the message in the same month that it was generated. To protect 
against this, new COUPON_CREDIT could be tracked during a particular month. At the end of the month, it can be 
added to COUPON_CREDIT that was earned in previous months. When the COUPON_CREDIT FIELD is sent to the 
terminal during the month in the group re-key EMM, it would be the absolute coupon credit issued to a particular termi- 
nal. Moreover, an additional field. COUPON_DEBIT, may be created inside the terminal to manage the coupons from a 
particular service provider for that month. Another way to secure against replay attacks within the same month would 
be to sequence the EMMs themselves. The decoder may then be able to differentiate between a new message and one 
that it has seen before. Another method would be to include a date/time parameter in the EMM. As with a sequence 
number, this field can only go forward or stay the same, but cannot be changed to a past value. 

For each individual service provider, any new COUPON_CREDIT value must be authenticated, e.g., in the group 
re-key message just as with the COUPON_CREDIT and VHJJMIT fields since merely signing the message or using 
public key cryptography will not prevent such replay attacks. Moreover, each new coupon record should track the 
sequence number which indicates when it was generated. When the group key epoch occurs, the group re-key EMM 
that was originally used to create the coupon record will not be able to create additional coupons since the message 
will be old. At that time, the new COUPON_CREDIT can be added to old COUPON_CREDIT. If, during the next month, 
no new coupons are sent to the terminal, and all of the existing coupons are used, then the entire coupon record can 
be erased. 

In a second digital coupon delivery method, coupons are delivered through an IPPV buy linkage. With each IPPV 
purchase, a bit in the program re-key message allows a service provider to deliver one or more coupons automatically 
and instantly to subscribers without waiting to get a report back or performing a "trip" (e.g.. delivery) with coupons as in 
the group re-key method discussed above. If a subscriber did not have any coupons from a particular service provider 
before, a new service provider coupon record is made. The coupon creation process is therefore tightly linked to actual 
purchases of IPPV programs. After a number of coupons have been accrued, the subscriber can redeem them. Typi- 
cally, a service provider will offer digital coupons which can be redeemed only for that service provider's programs. 
However, groups of service providers may collaborate to provide interchangeable coupons if desired. 

In another possible pirate attack, a pirate may attempt to manipulate the number of coupons which are awarded 
when performing the digital coupon preconditions, e.g., such as purchasing a number of IPPV programs. One possible 
solution uses a DES hash with encryption (e.g., signature) or public key encryption of the program re-key message. If 
the number of coupons is authenticated in the IPPV report-back, then the pirate s manipulation of this field would cause 
a bad cryptographic field. 

If the pirate does know the group key, counterfeiting could occur but may be detectable if the view history informa- 
tion (e.g., usage pattern data) is used to hash the coupon value and is sent along in the report-back. 

Moreover, if public key cryptography was used in the delivery of the program re-key message, then, even if the 
pirate knew the group public key, a message still could not be synthesized since the group private key would not be 
known. Public key cryptography has a distinct advantage over secret key cryptography since the group encrypt or pri- 
vate key is not in the terminal. Consequently, VLSI probing and other attacks against the terminal cannot reveal the key. 

In a third delivery method in accordance with the present invention, digital coupons are delivered in conjunction with 
extended commercial programs known as "infomercials." Preferably, a subscriber is rewarded with digital coupon cred- 
its only after viewing the program for a specific amount of time. Furthermore, to prevent the subscriber from simply tun- 
ing in the program and walking away, it might be advantageous to require some sort of subscriber involvement such as 
a control input which is requested by the user interface. 

A pirate may be able to alter code in a non-secure processor to automatically provide the subscriber involvement 
control signal. However, the amount of time that the program must be viewed, or at least tuned in, can be secured. To 
do this, there is no need to track the maximum time that the program lasts since the infomercial service provider is 
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essentially paying the subscriber to view the program. The PROGRAM_PAYOUT_DURATION field can be loaded into 
a countdown timer to enforce the minimum viewing time requirement of the digital coupon preconditions. The coupons 
are thus issued when the timer counts down to zero, and the timer counts down only when the infomercial channel is 
tuned in. Essentially, this ties up the terminal to tune in the infomercial and precludes it from tuning in another channel. 

Furthermore, the COUPON_RECORD_DURATION field is required to determine when the program record should 
be expunged from the secure processor's memory. 

A pirate may attempt to manipulate the field in the program re-key ECM, which indicates how many coupons are to 
be awarded when viewing the infomercial. One possible solution is to use a DES hash (e.g., signature) or public key 
encryption of the program re-key message. Like the other attacks described above, signing the program re-key mes- 
sage makes it hard for the pirate to counterfeit the program re-key message without knowledge of the group secret key 
or private key. Moreover, if public key cryptography is used in the delivery of the program re-key message, then, even if 
the group public key was known by a pirate, a message could not be synthesized since the group private key is not 
known. 

In another possible pirate attack, the pirate records legitimate program messages, and repeatedly plays back the 
messages to the terminal. The pirate may modify the terminal to provide control inputs directly to the chip or via the user 
interface to increase the number of coupons held by the chip. One solution to this attack is to create and store a program 
record in memory. In particular, the COUPON_CREDIT field is used to authenticate the number of coupons being 
awarded. In addition to COUPON_PKG_!D and COUPON_PROVIDER_!D, two duration timers are needed instead of 
one. One timer, COUPON_PAYOUT_DURATION, tracks how long the subscriber must be tuned to the program before 
coupons are awarded, and the other time, COUPON_RECORD_DURATION, tracks when the program record can be 
expired from memory. The amount of time that a record should be retained might be two months, for example. 

Delivery of program re-key messages by public key is a safer mechanism. A pirate would need to cryptographically 
search for the group private key to alter program re-key messages. The group private key is not delivered to any termi- 
nal anywhere in the network. The length of the group public keys delivered could expand according to the perceived 
piracy threat. And, the group public and private keys may be changed through the delivery of new EMMs. If there is a 
system breach, the infomercial feature could be abandoned simply by making program re-key ECMs with the coupon 
issuing feature missing, or not allowing IPPV purchases with coupons. 

In the above discussion, it was seen that there are three distinct methods for delivering coupons to the terminals. 
The first is group re-key EMM based, the second is tightly tied to IPPV authentication, and the third is Program Re-key 
ECM based using the "infomerciar concept. 

The group re-key method is similar to how IPPV is implemented with the only absolute COUPON_CREDIT given, 
and requiring a COUPON_DEBIT field to exist inside the terminal for each service provider with a 
COUPON_PROVIDER_ID. 

The IPPV purchase linkage method is a hybrid between the group re-key method and the program re-key method 
since it takes advantage of IPPV authentication that is already done and securely authenticated inside the terminal, and 
yet is delivered by a program re-key ECM with the appropriate parameters set. Coupons using this method can only be 
delivered through a real IPPV purchase. 

With the program re-key method, coupon redemption may or may not be tied to the view history report-back. For 
auditing of viewership, coupon redemption is tied to the report-back since a communication link such as a telephone 
network is required. 

Accordingly, it can be seen that the present invention provides a system for transmitting digital coupons to sub- 
scriber terminals for various promotional purposes. By delivering and managing the coupons electronically, the cou- 
pons are more likely to be used by the subscribers, and distribution and handling costs for the promoters are 
significantly reduced. Subscriber loyalty can be rewarded, while subscribers can also be selectively targeted to try out 
programming in which they are likely to have a special interest. Subscribers can be even be encouraged to view com- 
mercial programming such as infomercials. Additionally, with an optional report back feature, terminal usage pattern 
data can be retrieved and analyzed to determine the effectiveness of the promotions and to gather additional demo- 
graphic and individual data. Furthermore, the integrity of the scheme can be assured with various encryption tech- 
niques. 

Although the invention has been described in connection with various specific embodiments, those skilled in the art 
will appreciate that numerous adaptations and modifications may be made thereto without departing from the spirit and 
scope of the invention as set forth in the claims. 

For example, accounting of the coupon credit balance may be maintained by the network controller or other entity 
apart from the terminal. This accounting may be updated real-time as the coupon balance changes, or periodically, 
such as where an automatic telephone report back capability is provided. 
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Claims 



1 . A communication system, comprising: 

a controller for transmitting program services to a plurality of subscriber terminals via a communication chan- 
nel; 

said program services being adapted to be selectively recovered by said subscriber terminals; 

said controller being adapted to deliver digital coupon information to said terminals via said communication 

channel; 

said digital coupon information allowing said terminals to obtain credits when recovering first particular ones of 
said program services according to preconditions of said digital coupon information; 
said terminals maintaining a running balance of said credits obtained. 

2. The system of claim 1 , wherein: 

said credits are usable in obtaining second particular ones of said program services at a reduced charge. 

3. The system of claim 1 or 2, further comprising: 

monitoring means for monitoring a usage pattern of a selected one of said terminals to determine if said pre- 
conditions of said digital coupon information have been satisfied; 
said usage pattern being indicative of at least one of: 

(a) which of at least one of said first particular program services have been recovered by said selected termi- 
nal, and 

(b) a duration during which at least one of said first particular program services have been recovered by said 
selected terminal; 

wherein said credits are provided when there is a correlation between said usage pattern and said precondi- 
tions of said digital coupon information. 

4. The system of one of the preceding claims, further comprising: 

a user interface for selectively redeeming said credits according to a user input. 

5. The system of one of the preceding claims, further comprising: 

a user interface for obtaining a confirmation of user involvement when a corresponding one of said terminals 
is recovering said first particular ones of said program services. 

6. The system of claim 3, wherein: 

said first particular ones of said program services provide a plurality of individual programs which are adapted 
to be individually recovered by said selected terminal; and 

said credits are provided when said usage pattern indicates that said selected terminal has recovered at least 
one of: 

(a) a predetermined number of said plurality of individual programs; and 

(b) a predetermined amount of charges which are incurred by said selected terminal in recovering at least one 
of said individual programs. 

7. The system of one of the preceding claims, further comprising: 

means operatively associated with said controller for encrypting said digital coupon information and said pro- 
gram services according to a common cryptographic key. 

8. The system of claim 3, further comprising: 

a usage pattern accounting center which is operatively associated with said controller; 

said usage pattern accounting center being adapted to receive information indicative of said usage pattern of 

said selected terminal from said monitoring means via a communication link; 
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said controller receiving said information indicative of said usage pattern from said usage pattern accounting 
center for controlling the delivery of said digital coupon information to said selected terminal. 

9. The system of one of the preceding claims, wherein: 

said controller is adapted to deliver different digital coupon information to different ones of said plurality of sub- 
scriber terminals. 

10. A subscriber terminal in a communication system, comprising: 

means for selectively recovering program services which are received from a controller via a communication 
channel; 

means for receiving digital coupon information from said controller via said communication channel; 

said digital coupon information allowing said terminal to obtain credits when recovering first particular ones of 

said program services according to preconditions of said digital coupon information; and 

means for maintaining a running balance of credits obtained. 

1 1 . The terminal of claim 10, wherein: 

said credits are usable in obtaining second particular ones of said program services at a reduced charge. 

12. The terminal of claim 10 or 1 1 , further comprising: 

monitoring means for monitoring a usage pattern of said terminal to determine if said preconditions of said dig- 
ital coupon information have been satisfied; 
said usage pattern being indicative of at least one of: 

(a) which of at least one of said first particular program services have been recovered by said terminal, and 

(b) a duration during which at least one of said first particular program services have been recovered by said 
terminal; 

said credit being provided when there is a correlation between said usage pattern and said preconditions of 
said digital coupon information. 

13. The terminal of claim 12, wherein: 

said first particular ones of said program services provide a plurality of individual programs which are adapted 
to be individually recovered by said terminal; and 

said credits are provided when said usage pattern indicates that said terminal has recovered at least one of: 

(a) a predetermined number of said plurality of individual programs; and 

(b) a predetermined amount of charges which are incurred by said terminal in recovering of at least one of said 
individual programs. 

14. The terminal of claim 12, further comprising: 

a communication interface for communicating information indicative of said usage pattern from said monitoring 
means to a usage pattern accounting center, which is operatively associated with said controller, via a commu- 
nication link; 

said controller receiving said information indicative of said usage pattern from said accounting center for con- 
trolling the delivery of said digital coupon information to said terminal. 

15. The terminal of one of claims 10 to 14, further comprising: 

means responsive a user interface for enabling said terminal to selectively redeem said credits according to a 
user input. 

16. The terminal of one of claims 10 to 15, further comprising: 

means responsive to a user interface for obtaining a confirmation of user involvement when said terminal is 
recovering said first particular ones of said program services. 
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1 7. The terminal of one of claims 1 0 to 1 6. wherein: 

said digital coupon information and said program services are encrypted according to a common cryptographic 
key. 

5 

18. The terminal of one of claims 10 to 17, further comprising: 

authentication means for cryptographically authenticating said digital coupon information. 
10 19. The terminal of daim 18, wherein: 

said authentication means authenticates said digital coupon information according to a group key. 

20. The terminal of claim 18 or 19, wherein: 

15 

said authentication means authenticates said digital coupon information according to a public key. 

21. The terminal of one of claims 10 to 20, wherein: 

20 said program services include programs which are encrypted according to associated program re-keys: and 

at (east a particular one of said program re-keys is communicated to said terminal to allow said terminal to 
decrypt and recover the associated program using said program re-key: and 
said digital coupon information is communicated to said terminal with said program re-keys. 

25 22. A method for transmitting digital coupon information from a controller to a plurality of subscriber terminals in a com- 
munication network via a communication channel, said network also being used for communicating program serv- 
ices from said controller to said plurality of subscriber terminals, said program services being adapted to be 
selectively recovered by said subscriber terminals, comprising the steps of: 

30 targeting at least selected ones of said terminals to receive said digital coupon information; 

delivering said digital coupon information to said terminals via said communication channel; 

said digital coupon information allowing said terminals to obtain credits when recovering first particular ones of 
35 said program services according to preconditions of said digital coupon information; and 

maintaining a running balance of said credits obtained at said terminals. 

23. The method of claim 22. wherein: 

40 said credits are usable in obtaining second particular ones of said program services at a reduced charge. 

24. The method of claim 22 or 23, comprising the further step of: 

monitoring a usage pattern of a selected one of said terminals to determine if said preconditions of said digital 
45 coupon information have been satisfied; 

said usage pattern being indicative of at least one of: 

(a) which of at least one of said first particular program services have been recovered by said selected termi- 
nal, and 

(b) a duration during which at least one of said first particular program services have been recovered by said 
so selected terminal; and 

providing said credits when there is a correlation between said usage pattern and said preconditions of said 

digital coupon information. 

25. The method of claim 24, wherein said first particular ones of said program services provide a plurality of individual 
55 programs which are adapted to be individually recovered by said selected terminal, said method comprising the fur- 
ther step of: 

providing said credits when said usage pattern indicates that said selected terminal has recovered at least one 
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of: 

(a) a predetermined number of said plurality of individual programs; and 

(b) a predetermined amount of charges which are incurred by said selected terminal in recovering at least one 
of said individual programs. 

26. The method of claim 24 or 25, comprising the further steps of: 

receiving information indicative of said usage pattern of said selected terminal from said monitoring means via 
a communication link; and 

controlling the delivery of said digital coupon information to said selected terminal according to said information 
indicative of said usage pattern. 

27. The method of one of claims 22 to 26, comprising the further steps of: 

providing a user input to said terminals; and 

selectively redeeming said credits according to said user input. 

28. The method of one of claims 22 to 27, comprising the further step of: 

obtaining a confirmation of user involvement when a corresponding one of said terminals is recovering said 
first particular ones of said program services. 

29. The method of one of claims 22 to 28, comprising the further step of: 

encrypting said digital coupon information and said program services according to a common cryptographic 
key. 

30. The method of one of claims 22 to 29, comprising the further step of: 

delivering different digital coupon information to different ones of said plurality of subscriber terminals. 
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